OpenC3 COSMOS CVE-2026-42088

Requires authenticated access with Script Runner widget permissions (specifically the ability to create and execute Python or Ruby scripts in OpenC3 COSMOS). The vulnerability is exploitable in default Docker Compose deployments where all COSMOS containers share a common Docker network without service-level authentication. Exploitation requires knowledge of internal service hostnames and ports (Redis, MinIO), which are discoverable through environment variables accessible within the script execution context. Does NOT require administrator privileges or Admin Console access-the vulnerability allows low-privilege Script Runner users to escalate to administrative capabilities. The scope change (S:C) in CVSS reflects that exploitation crosses the privilege boundary from script execution context to direct database/storage access. User interaction is not required (UI:N) once the attacker has Script Runner access. Attack is remotely exploitable (AV:N) by any authenticated user on the network who can access the COSMOS web interface.

Real-world risk is CRITICAL for organizations running OpenC3 COSMOS with multiple user tiers. The CVSS 9.6 accurately reflects impact severity: authenticated users with low-privilege Script Runner access can read all secrets (C:H), modify system configuration and inject malicious plugins (I:H), with scope change indicating container-boundary violation. However, exploitation requires authenticated access (PR:L) and knowledge of COSMOS internal architecture-this is not a mass-exploitation vulnerability. No CISA KEV listing as of analysis date suggests no widespread active exploitation, likely because OpenC3 COSMOS has a specialized user base in aerospace/embedded systems rather than internet-facing deployments. The GitHub security advisory provides detailed proof-of-concept demonstrating Redis credential extraction and database manipulation, making exploitation straightforward for insider threats or compromised accounts. Primary risk scenarios: supply chain attacks via malicious plugins uploaded to buckets, credential theft from Redis, and privilege escalation in multi-tenant deployments. The low attack complexity (AC:L) combined with network attack vector (AV:N) means any authenticated user on the network can exploit this remotely without user interaction. Patch adoption is critical-version 7.0.0-rc3 was released specifically to address this, with stable 7.0.0 confirming the fix. Organizations should prioritize this update, especially if Script Runner access is granted to non-administrator users.

An authenticated user with Script Runner permissions executes a Python script that reads Redis credentials from environment variables exposed in the openc3-cosmos-script-runner-api container. The script establishes a direct connection to the Redis service on the shared Docker network, bypassing the web API's authorization layer. The attacker queries the Redis database to extract stored secrets, API keys, or authentication tokens, then modifies the plugin store URL configuration to point to an attacker-controlled server. When administrators install or update plugins, the system downloads a malicious plugin package containing a backdoor. The attacker can also upload modified configuration files directly to the MinIO buckets service, persisting changes across container restarts. Detailed proof-of-concept with screenshots is available in GitHub advisory GHSA-2wvh-87g2-89hr demonstrating Redis manipulation and bucket file upload.